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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

I )M Responsive to communication(s) filed on 04 June 2004 . 

2a)G3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quay/e, 1935 CD. 11, 453 O.G. 213. 
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8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) Q The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
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DETAILED ACTION 

1. This office action is in response to the amendment filed June 4, 2004. Claims 1-4, 6-1 1, 
13-18, and 20-24 are presented for examination. 

2. The text of those sections of Title 35, U.S. code not included in this office action can be 
found in a prior office action. 

Claim Rejections - 35 USC § 103 

3. Claims 1-4, 6-11, 13-18, and 20-24 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Gosling (USPN 5,668,999) in view of Jagannathan et al. (USPN 
6,496,871) (hereinafter Jagannathan). 

4. As per claim 1, Gosling teaches the invention as claimed, including a method for 
verifying type safety of an application snapshot, the method comprising: 

the application snapshot includes a subprogram, an operand stack, and a point of 
execution (col. 6 lines 28-46); 

examining the application snapshot on the second computing device to identify the 
subprogram and the point of execution within the subprogram (col. 7 lines 3 1-44); 

examining the subprogram on the second computing device to determine an expected 
structure of the operand stack at the point of execution (col 7 line 10-65); 

validating that the state of the application snapshot on the second computing device is 
consistent with the expected structure of the operand stack (col. 7 line 58-65); 
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verifying on the second computing device that variables and arguments within the 
application snapshot are of the proper type (col. 10 lines 16-55); and 

if the state of the application snapshot is validated as consistent with the expected 
structure of the operand stack, executing the application snapshot on the second computing 
device (col 10 lines 56-64). 

5. Jagannathan teaches the invention as claimed, including the following limitations not 

shown by Gosling: ^ . , — ■ H. 

the application snapshot including a state of an executing program that is moved from a 
first computing device to a second computing device across a network in order to continue _ 
execution on the second computing device (col. 20 lines 45-55); 

receiving the application snapshot of the executing program from the first computing 
device on the second computing device (col. 18 lines 4-23); 

resuming execution of the application snapshot at the point of execution on the first 
computing device (col. 18 lines 4-23). 

6. It would have been obvious to one of ordinary skill in the art to combine Gosling and 
Jagannathan since Gosling, while providing means for verifying an application before execution, 
fails to specify how ntigration^f jan application might .be -handled. -Rather, the. procedure -for^^- 
verifying an application snapshot is presented, "but* an assumption is made that orice the program 
begins executing, it will continue to reside on that machine. With the advent of mobile code and 
distributed processing, a method of handling process migration during process execution is 
necessary. Additionally, since many networks are heterogeneous, verification across platforms is 
necessary. Jagannathan provides a system that allows dynamic process migration while also 
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maintaining state information related to the ongoing execution. Jagannathan acknowledges that 
the problem of migration of ongoing processes has been addressed, but the prior art does not 
allow for state information related to those processes to be easily migrated (col. 4 lines 47-59). 
Jagannathan also indicates that process migration may occur between heterogeneous machines, 
indicating a specific need for a verification method, such as the one disclosed by Gosling (col. 18 
lines 4-23). Jagannathan seeks to improve the prior art by not only providing a system that 
allows migration of ongoing processes, but also allows the state information to be migrated (col. 
5 lines 28-35). The combination of Gosling and Jagannathan would provide an exemplary model 
for verifying the type safety of an executing application, while maintaining state information 
related to the application as it is migrated from one machine to another. 

7. As per claim 2, Gosling teaches the invention as claimed, including the method of claim 
1 , wherein examining the subprogram to determine the expected structure of the operand stack at 
the point of execution involves examining the subprogram with a code verifier, wherein the code 
verifier ensures that: 

the subprogram does not cause the operand stack to overflow and underflow (col. 8 line 
46 -col. 9 line 18); 

a use of a local variable does not violate type safety (col. 10 lines 16-27); and 
an argument of an instruction is of an expected type (col 6 lines 6-13). 

8. As per claim 3, Gosling teaches the invention as claimed, including the method of claim 
1, wherein the operand stack contains at least one local variable, at least one argument that is 



Application/Control Number: 09/675, 1 1 6 Page 5 

Art Unit: 2127 

passed as a parameter to the subprogram, and an offset to the point of execution within the 
subprogram (col. 5 lines 21-29; col. 6 lines 6-13; col. 6 lines 28-46). 

9. As per claim 4, Gosling teaches the invention as claimed, including the method of claim 
2, wherein the expected structure of the operand stack includes a collective size of entries and the 
types of entries expected on the operand stack at the point of execution within the subprogram 
(col 7 lines 20-30). 

10. As per claim 6, Gosling teaches the invention as claimed, including the method of claim 
4, wherein validating that the state of the application snapshot on the second computing device is 
consistent with the expected structure of the operand stack involves ensuring that the collective 
size of entries and the types of entries on the operand stack agree with the collective size of 
entries and the types of entries expected on the operand stack (col 9 lines 44-62). 

11. As per claim 7, Jagannathan teaches the invention as claimed, including the method of 
claim 1, wherein resuming execution of the application snapshot involves restarting the 
subprogram at the point of execution within the second computing device (col. 18 lines 4-23). 

12. As per claim 22, Jagannathan teaches the invention as claimed, including the method of 
claim 1, further comprising restoring the state of an object within the application snapshot on the 
second computing device by changing a pointer from an address of the object on the first 
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computing device to an address of the object on the second computing device (col 21 lines 7- 
27). 

13. As per claims 8-1 1, 13-18, 20-21, and 23-24, Gosling teaches the invention as claimed, 
including an apparatus including a computer-readable storage medium storing instructions that 
when executed by a computer causes the computer to perform the method of claims 1-4, 6-7, and 
22 (Fig. 2). 

Response to Arguments 

14. Applicant's arguments filed June 4, 2004 have been fully considered but they are not 
persuasive. 

15. Applicant argues on page 9, "Gosling is clearly directed to a system 'for verifying the 
proper operation of the executable program prior to actual execution by a host processor' 
[whereas] ...the present invention is directed to forming a snapshot of an executing program." 
Applicant adds that "verifying a bytecode program ...is not the same as verifying a snapshot of an 
executing program'' 

Applicant further argues that "Gosling verifies only the bytecode program, and not the 
entire state of the executing program. Hence, Gosling does not validate variables and 
arguments" Applicant also argues that Jagannathan fails to resolve the alleged deficiencies of 
Gosling. 
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16. Applicant's argument relating to Gosling's alleged inability to verify an executing 
program is deficient on the grounds that Gosling's disclosure that the bytecode program is 
verified "prior to actual execution" is performed in exactly the same manner as the claimed 
snapshot verification. Gosling downloads a bytecode program and verifies the type safety of the 
program including a snapshot of the application at various points of execution before executing 
it. If the preprocessing verification generates any program faults, the program is not executed. 

Turning to claim 1 of the present invention, a snapshot is taken of an executing program 
and moved to a second computing device. Thereafter, the type safety is validated along with the 
expected structure of the operating stack. After all the verifications have been performed and 
certified, the execution is resumed, i.e. execution begins. The execution of the program being 
verified is temporarily suspended while it is being verified, and execution resumes only if the 
state of the application is verified as being consistent with the expected structure of the operand 
stack. This manner of verifying a snapshot before resuming execution functions in the same way 
that Gosling pre-verifies stack usage of a bytecode program before commencing execution on a 
processor. 

Furthermore, Gosling specifically addresses the verification of ongoing programs to 
verify chat all variables and arguments of a program are consistent with what is expected to be on 
the operand stack at the particular execution point (col. 2 lines 32-39, "During processing of the 
specified program, the verifier takes a 'snapshot' of the virtual operand stack immediately prior 
to each multiple-entry point..., compares that snapshot with the virtual operand stack state after 
processing each of the other preceding bytecode instructions for the same multiple-entry point, 
and generates a program fault if the virtual stack states are not identical") (emphasis added). 
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While Gosling generally verifies bytecode programs before any execution has started, 
methods are provided for verifying programs that may be executing. Gosling is primarily 
concerned with pre-verification of bytecode programs, and does not specifically address such 
issues as process mobility or migration of processes. Jagannathan is cited as showing why 
distributed processing systems may move an executing program from one machine to another 
(Abstract, "objects are selectively movable among the at least two computer machines by a 
programmer of the system"), while Gosling addresses the need for providing security of such 
mobile programs (col. 5 lines 5-12, "the downloaded bytecode program may contain errors 
involving the data types of operands not matching operands, which may cause the program to fail 
during execution. Even worse, a bytecode program might attempt to create object 
references. . . and to thereby breach the security and/or integrity of the user's computer"). 

Conclusion 

17. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
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however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Syed J Ali whose telephone number is (571) 272-3769. The 
examiner can normally be reached on Mon-Fri 8-5:30, 2nd Friday off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Meng-Ai T An can be reached on (571) 272-3756. The fax phone number for_the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Syed Ali 
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MENG-AL T. AN 

SUPERVISORY PATENT EXAMINER 

W-'-Pdl OGV CENTER ?ipn 



